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Top Stories 

• The Brooklyn District Attorney announced March 31 that 23 New York City medical 
professionals were charged for allegedly running an insurance fraud scheme that billed 
Medicaid $7 million in expenses for patients they recruited from homeless shelters and 
welfare centers between October 2012 and September 2014. - Reuters (See item 18 ) 

• Classes at South Albany High School in Oregon were canceled April 1 following a 4-alarm 
fire that destroyed 1 building and caused more than $1 million in damage. - KOIN 6 
Portland (See item 19 ) 

• About $3.5 million of jewelry was stolen from the Diamonds by Monet store in Temecula, 
California March 24 after a suspect broke into a safe where the jewelry was held. - KABC 
7 Los Angeles (See item 29) 

• A driver fleeing the scene of a hit-and-run crash March 31 lost control of his vehicle and 
crashed into a Star Food Mart store in Fort Worth, Texas, killing 1 person and injuring 7 
others. - KXAS 5 Fort Worth (See item 30 ) 
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Energy Sector 



1. April 1, WCNC 36 Charlotte - (North Carolina) 5 charged for copper theft at local 
substations. Lincolnton police announced April 1 that 5 individuals were arrested and 
charged in connection to a series of copper thefts targeting Duke Energy substations in 
North Carolina that resulted in damages of up to $3 million. The suspects may also be 
linked to a series of copper thefts in South Carolina and authorities reported that some 
of the individuals involved in the alleged scheme were arrested earlier in 2015. 

Source: http://www.wcnc.com/storv/news/crime/2015/04/01/5-charged-for-copper- 
theft-at-local-substations/70760678/ 

2. April 1, Reuters - (North Dakota) North Dakota launches oil rules hoping to curb 
U.S. rail disasters. The governor of North Dakota announced April 1 that the State will 
require the more-than 1.2 million barrels of crude extracted each day from the State’s 
Bakken shale formation be removed of volatile gases linked to recent crude-by-rail 
incidents. The crude oil conditioning order requires every barrel of crude to be run 
through machines that filter for ethane, propane, and other national gas liquids prior to 
transportation. 

Source: http://www.msn.com/en-us/news/us/north-dakota-launches-oil-rules-hoping-to- 
curb-us-rail-disasters/ar-AAaiell 

[ Return to top ] 

Chemical Industry Sector 

3. March 31, Beaumont Enterprise - (Texas) ExxonMobil fire likely caused by 
mechanical problem. An ExxonMobil spokesperson stated March 3 1 that the 
company’s chemical plant in Beaumont will remain offline indefinitely while officials 
continue to investigate a March 30 fire that appears to have ignited when a vapor 
released from a propylene line due to a valve that experienced a mechanical failure. 
Source: http://www.beaumontenterprise.com/news/article/ExxonMobil-fire-likelv- 
caused-bv-mechanical-6171386.php 

4. March 30, U.S. Environmental Protection Agency - (Florida) EPA takes action to 
protect the public from an unregistered pesticide / EPA issues order to stop the 
sale of BioStorm and NanoStrike. The U.S. Environmental Protection Agency (EPA) 
ordered Saint Augustine-based Nano Defense Solutions, Inc., March 30 to halt sales of 
its BioStorm and NanoStrike products that the company claims in advertisements are 
able to kill or repel bacteria or germs, despite having never been tested and registered 
by the EPA as an approved pesticide. 

Source: 

http://vosemite.epa.gov/opa/admpress.nsf/21b8983ffa5d0e4685257dd4006b85e2/ff5b8 

9a7e378544b85257el8Q06c9bc3!OpenDocument 
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Nuclear Reactors, Materials, and Waste Sector 
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Nothing to report 
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Critical Manufacturing Sector 

5. March 30, U.S. Department of Labor - (Wisconsin) Koser Iron Works faces 

penalties of more than $102K for exposing workers to machine, fire and explosion 
hazards, lack of training. The U.S. Occupational Safety and Health Administration 
cited Barron-based Koser Iron Works Inc., for 2 willful, 4 repeated, and 12 serious 
safety violations March 30, including failures to use energy control procedures and 
ensure safety mechanisms were in place on presses and lathes, and a lack of training 
and protective equipment. Proposed fines total $102,180. 

Source: https://www.osha.gov/newsrelease/reg5-20150330.html 

[ Return to top ] 



Defense Industrial Base Sector 

6. March 31, WAVY 10 Portsmouth - (Virginia) 1 dead in excavator accident at 
Colonna’s Shipyard. The Virginia Occupational Safety and Health Administration 
confirmed March 3 1 that a worker at Colonna’s Shipyard in Norfolk died when a 
concrete piling crushed the cab of an excavator that the worker was operating March 
30. Authorities continue to investigate the incident but do not suspect foul play. 

Source: http://wavv.com/2015/03/3Q/l-dead-in-excavator-accident-at-colonnas- 
shipyard/ 

T Return to top i 

Financial Services Sector 

7. March 31, Reuters - (International) Swiss asset manager pleads guilty in U.S. over 
tax dodge scheme. A Swiss asset manager from an unidentified firm pleaded guilty 
March 31 to conspiring to defraud the U.S. and the Internal Revenue Service in a 
scheme in which he and a Zurich-based lawyer who pleaded guilty in 2013 helped U.S. 
clients hide millions of dollars in offshore accounts in at least 5 Swiss banks and 
established accounts under the names of Liechtenstein-based sham foundations that 
they had created. 

Source: http://www.reuters.com/article/2015/Q3/31/us-usa-tax-swiss- 
idUSKBN0MR2KK201 50331 



For another story, see item 26 
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Transportation Systems Sector 
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8. March 31, WISN 12 Milwaukee - (Wisconsin) Hwy 45 SB reopens after morning 
crash. All southbound lanes of Highway 45 at Watertown Plank Road in Wauwatosa 
were closed for more than 3 hours March 31 due to a 3-vehicle crash involving an 
overturned vehicle. 

Source: http://www.wisn.com/traffic/crash-closes-hwy-45-at-watertown-plank- 
road/32105582 

9. March 31, Associated Press - (Oklahoma) Westbound Interstate 44 near Lawton 
reopens after crashes. The Oklahoma Highway Patrol reported that westbound lanes 
of Interstate 44 (H.E. Bailey Turnpike) in Elgin reopened after closing for nearly 3 
hours following 3 separate crashes March 31. At least one person was injured and 
officers reported that the area was covered in heavy fog at the time of the accidents. 
Source: http://www.ktul.com/storv/28662346/westbound-interstate-44-shut-down-near- 
lawton-due-to-crashes 

10. March 31, Associated Press; Washington Times - (Tennessee) Former postal 
contractor charged with stealing mail. Authorities reported March 30 that a former 
U.S. Postal Service contractor and his spouse were charged for allegedly conspiring to 
steal U.S. mail and Veteran’s Administration U.S. mail packages containing 
prescription drugs intended for military veterans from a U.S. Postal Service facility in 
Memphis in November 2013. Officials alleged that the couple intended to distribute 
hydrocodone stolen from the packages. 

Source: http://www.washingtontimes.eom/news/2015/mar/3 1/former-postal-contractor- 
charged- with- stealin g-mai/ 

For additional stories, see items 2 and 14 
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Food and Agriculture Sector 

11. April 1, U.S. Food and Drug Administration - (National) GetGo from Giant Eagle 
voluntarily recalls select Grab-and-Go subs due to an undeclared egg allergen. 
The U.S. Food and Drug Administration reported March 31 that GetGo from Giant 
Eagle recalled select individually wrapped Grab-and-Go Turkey and Swiss Subs and 
Grab-and-Go Italian Subs due to undeclared egg. The products were sold in Grab-and- 
Go/”Fresh-to-Go” display cases inside GetGo locations across several States. 

Source: http://www.fda.gov/Safetv/Recalls/ucm440810.htm 

12. March 31, U.S. Food and Drug Administration - (National) Whole Foods Market's 
Southwest Region recalls Bran Muffin six packs due to undeclared egg and milk. 
The U.S. Food and Drug Administration announced March 31 that Whole Foods 
Market issued a recall for Bran Muffin six packs produced and sold in Whole Foods 
Market Southwest retail stores due to undeclared egg and milk. 

Source: http://www.fda.gov/Safetv/Recalls/ucm440729.htm 

13. March 31, U.S. Food and Drug Administration - (National) Aurora Products, Inc. 
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expands voluntary product recall to include one additional private label branded 
customer and to clarify the name of two bulk products previously recalled that 
used walnuts in them due to possible health risk. The U.S. Food and Drug 
Administration reported March 31 that Aurora Products, Inc., expanded its voluntary 
nationwide recall of certain lots of natural walnuts and trail mixes containing walnuts to 
include Ernest Klein branded products that were distributed to one New York City 
retail store due to possible Salmonella contamination. The company also clarified the 
name of two Aurora brand bulk products that were previously recalled. 

Source: http://www.fda.gov/Safety/Recalls/ucm440716.htm 
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Water and Wastewater Systems Sector 

14. March 31, Cleveland.com - (Ohio) Ohio EPA tries to block Cleveland harbor 
sediment from being dumped in Lake Erie. The Ohio Environmental Protection 
Agency approved a permit March 31 to allow the U.S. Army Corps of Engineers to 
dredge Cleveland’s harbor beginning May 15 in order to keep the first 6 miles of the 
Cuyahoga River open for shipping traffic. The permit restricts the agency from placing 
any dredged material in Lake Erie and requires that all material be placed in a confined 
disposal facility that holds sediments from the shipping channel. 

Source: 

http://www.cleveland.com/open/index.ssf/2015/03/ohio epa tries to block sedime.ht 
ml 

15. March 31, Kokomo Perspective - (Indiana) Drinking water is safe in Kokomo. The 
U.S. Environmental Protection Agency (EPA) and Indiana-American Water Co., 
reported March 31 that public drinking water in Kokomo was safe for consumption 
after the EPA added a hazardous waste site in the city to its Superfund National Priority 
List during the week of March 23 due to a 300-acre plume of contamination in the 
groundwater beneath the city. Officials stated that the water treatment system has been 
successful in removing contaminants but a long-term solution is still required to 
address the issue. 

Source: http://kokomoperspective.com/kp/drinking-water-is-safe-in- 
kokomo/article 90263fb6-d718-lle4-8ccf-efla69be953d.html 



16. March 31, KHON 2 Honolulu - (Hawaii) More than 11,000 gallons of wastewater 
spills in Lahaina. Crews contained, cleaned, and disinfected a spill of 11,000 gallons 
of wastewater that overflowed at the Lahaina Wastewater Reclamation facility on Maui 
March 31. Officials stated that the overflow was caused by a mechanical failure and the 
spill was contained to the plant. 

Source: http://khon2.com/2015/03/31/more-than-11000-gallons-of-wastewater-spills- 
in-lahaina / 
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Healthcare and Public Health Sector 



17. March 31, KFSN 30 Fresno; Associated Press - (California) 2 dead in downtown 
Fresno medical office shooting. A gunman entered a medical office building in 
downtown Fresno, which houses a pediatric clinic and eye clinic, and fatally shot a 
woman that he knew and targeted before turning the gun on himself March 3 1 . The 
building and several surrounding businesses were evacuated while police searched and 
cleared the scene. 

Source: http://abc30.com/news/large-police-presence-at-an-office-building-incident-in- 
downtown-fresno/595458/ 



18. March 31, Reuters - (New York) New York doctors accused of using free shoes 
offer to defraud Medicaid. The Brooklyn District Attorney announced March 31 that 
23 New York City doctors and medical workers were charged for allegedly running an 
insurance fraud scheme that billed Medicaid $7 million in expenses for patients they 
recruited from homeless shelters and welfare centers between October 2012 and 
September 2014. The medical professionals promised the recruited patients free shoes 
if they produced a Medicaid card and agreed to undergo unnecessary physical therapy 
and testing. 

Source: http://www.reuters.com/article/2015/03/31/us-usa-new-vork-fraud- 
idUSKBN0MR2J4201 50331 



For another story, see item 4 
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Government Facilities Sector 

19. April 1, K01N 6 Portland - (Oregon) 4-alarm fire causes $1M damage at South 
Albany HS. Classes at South Albany High School in Oregon were canceled April 1 
following a 4-alarm fire that destroyed the cafeteria building, which housed the band 
and choir rooms, and left more than $1 million in damage. Authorities are investigating 
the cause of the fire. 

Source: http://koin.com/2015/04/01/significant-fire-buming-at-s-albany-high-school/ 

20. April 1, Myrtle Beach Sun News - (South Carolina) Georgetown County bus crash 
sends 22 students to hospital. A driver, 20 students, and the bus driver were 
transported to area hospitals after a vehicle rear-ended a Georgetown County School 
District bus in Andrews, South Carolina, March 31. 

Source: http://ww w. senow .com/news/state/article 8e09d90a-d86 1 - 1 1 e4-a4 1 7- 
df3d4bb3eb5f.html 

21. March 31, Softpedia - (Florida) Florida Department of State exposes voter 
information. The Florida Department of State reported March 3 1 that the Florida 
Division of Elections notified 45,173 individuals after 15 compact discs that stored 
their personal information were delivered to entities ordering them without redacting 
contact details of certain individuals who are exempt from having their personal 
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information released to the public. Authorities do not believe any of the information 
will be misused and attributed the error to a malfunction in the automated software 
used to process record requests. 

Source: http://news.softpedia.com/news/Florida-Department-of-State-Exposes-Voter- 
Information-477228.shtml 



22. March 31, Munster Times of Northwest Indiana - (Indiana) LaPorte County 
Courthouse back to normal after carbon monoxide leak. The LaPorte County 
Courthouse in Indiana was evacuated for 3 hours March 30 after 2 boilers in the 
basement of the building leaked carbon monoxide, causing levels to go up to 500 parts 
per million. Crews shut down the boilers and aired out the facility before allowing 
individuals back into the building. 

Source: http://www.nwitimes.com/news/local/laporte/laporte-countv-courthouse-back- 
to-normal-after-carbon-monoxide-leak/article a55cOac5-b845-5925-91ec- 
c09425428438.html 

23. March 31, Merrillville Post-Tribune - (Indiana) Ambulance driver with license 
suspensions hits school bus, 15 injured. Three adults and 12 Memorial Elementary 
School students were injured after an ambulance ran a stop sign and hit a Valparaiso 
school bus at Indiana 130 and County Road 625W in Union Township March 31. 
Source: http://www.chicagotribune.com/suburbs/post-tribune/news/ct-ptb-porter-bus- 
crash-st-0401-20150331-story.html 

T Return to top i 

Emergency Services Sector 

24. April 1, Middletown Press; Associated Press - (Massachusetts; Connecticut) Man gets 
2.5 years for fake emergency calls to Connecticut dispatchers. A Massachusetts 
man pleaded guilty March 30 for showing up to fire scenes in Great Barrington with 
emergency responder equipment and making several fake radio transmissions which 
were routed to Litchfield County Dispatch in Connecticut in December 2013 and 
January 2014. The suspect was arrested in April 2014 and admitted to police in March 
that his voice was the one on the tapes of the false calls. 

Source: http://www.middletownpress.com/general-news/20150331/man-gets-25-vears- 
for-fake-emergency-calls-to-connecticut-dispatchers 

25. March 31, KYW 3 Philadelphia - (Pennsylvania) Ex-firefighter accused of taking 
several hostages inside Elkins Park firehouse. A former volunteer firefighter was 
arrested after taking four people hostage at the LaMott Fire Company in Montgomery 
County, Pennsylvania, March 31. The suspect was armed with a gun and surrendered to 
police about an hour after taking the individuals hostage in the firehouse. 

Source: http://philadelphia.cbslocal.com/2015/03/31/reports-hostage-situation-at- 
elkins-park- firehouse/ 
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Information Technology Sector 



26. April 1, Help Net Security - (International) WordPress sites compromised to redirect 
to Pirate Bay clone, exploit kit. Security researchers at Malwarebytes identified a 
malware campaign that uses an unknown number of compromised WordPress Web 
sites containing iframes that direct users to a site hosting the Nuclear exploit kit, which 
leverages an Adobe Flash Player vulnerability in versions before 16.0.0.287 to 
download a banking trojan. 

Source: http://www.net-security.org/malware news.php?id=3005 

27. April 1, Softpedia - (International) Firefox 37 fixes critical flaws, adds OneCRL 
certificate revocation mechanism. Mozilla released an update for its Firefox browser 
that addresses several critical vulnerabilities, including two type confusion flaws, two 
memory corruption crashes, a user-after-free error, and memory safety hazards that 
could have allowed attackers to run arbitrary code on users’ systems. Firefox version 
37 also includes OneCRL, a feature that allows developers to update the list of revoked 
certificates without pushing a new application update. 

Source: http://news.softpedia.com/news/Firefox-37-Fixes-Critical-Flaws-Adds- 
OneCRL-Certificate-Re vocation-Mechanism-47 7314. shtml 



28. March 31, Softpedia - (International) Google bans 192 bad extensions affecting 14 
million Chrome users. Google removed 192 extensions from its Web store that 
contained ad injectors that exposed up to 14 million users to risks of man-in-the-middle 
(MitM) attacks and links to install dangerous software, after researchers at the 
University of California, Berkeley devised a method to root out potentially malicious 
extensions. Findings from a recent Google study confirmed that 5 percent of all visitors 
to Google sites have ad injectors present on their systems, and that 34 percent of 
Chrome extensions that contained ad injectors were classified as malware. 

Source: http://news.softpedia.com/news/Google-Bans-192-Bad-Extensions-Affecting- 
1 4-Million-Chrome-Users-477226 . shtml 



Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 
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Communications Sector 

Nothing to report 
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Commercial Facilities Sector 



29. April 1, KABC 7 Los Angeles - (California) $3.5M in jewels stolen from Temecula 
business. More than 2,000 pieces of retail jewelry worth about $3.5 million was stolen 
from the Diamonds by Monet jewelry store in Temecula March 24 after a suspect cut 
holes into a roof and wall to access the store’s office, then used a power saw and 
jackhammer to break into a safe where the jewelry was held. A reward is being offered 
for information leading to an arrest. 

Source: http://abc7.com/news/$35m-in-jewels-stolen-from-temecula-business/602231/ 

30. April 1, KXAS 5 Fort Worth - (Texas) 1 killed, 7 injured as driver fleeing highway 
wreck crashes into store. A driver fleeing the scene of a hit-and-run crash March 31 
lost control of his vehicle and crashed into a Star Food Mart store in Fort Worth, killing 
1 person and injuring 7 others. Firefighters worked to free several individuals that were 
trapped by the vehicle, while crews stabilized the structure and shut off power to the 
building. 

Source: http://www.nbcdfw.com/news/local/4-Iniured-After-Car-Slams-Into-Fort- 
Worth-Store-298 1 867 1 1 .html 



31. April 1, Associated Press; WNBC 4 New York City - (New York) Attempt to cover up 
gas siphoning may have caused East Village blast: Con Ed. Con Edison officials 
stated April 1 that authorities are investigating the possibility that an apparent gas line 
explosion in the Manhattan area of New York City March 26 may have been caused by 
an attempt to remove an illegal siphoning apparatus from the gas line during a building 
inspection. Two individuals were killed and 22 others were injured by the blast that 
leveled three Manhattan apartment buildings and damaged a fourth building. 

Source: http://www.nbcnewvork.com/news/local/Con-Edison-Gas-Coverup-Siphoning;- 
East- Village-Explosion-NY C-298305 151 .html 

32. April 1, WJLA 7 Washington, D.C. - (Maryland) Boy sets fire, displaces 50 residents 
of Suitland apartment building. Up to 50 residents were displaced from a Suitland 
apartment building March 31 after a juvenile accidentally set a fire that prompted 
officials to cut electric and gas utility services to the building. Damage was estimated to 
total $50,000. 

Source: http://www.wila.com/articles/2015/03/boy-sets-fire-displaces-50-residents-of- 
suitland-apartment-buildings- 1 1 2792.html 

For another story, see item 4 
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Dams Sector 



33. April 1, Associated Press; Schenectady Daily Gazette - (New York) Canal locks 

undergoing ‘pump-out’ repairs ahead of opening. Authorities announced a plan 
April 1 to extensively repair or replace several locks on the Erie and Champlain canals 
in New York in preparation for the opening of the waterways in the spring. During the 
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pump-outs, crews will clear debris and repair the steel and wood hinges that open and 
close gates at the locks. 

Source: http://www.niherald.com/storv/28690450/canal-locks-undergoing-pump-out- 
repairs-ahead-of-opening 

34. March 31, Columbia Basin Herald - (Washington) Wanapum Dam pool back to 
normal level. Officials reported that Wanapum Dam in Washington reached normal 
operating levels and nearly all boat launches were operational after a crack was 
discovered in the spillway in February 2014, prompting an estimated $69 million repair 
project. Work on the dam is expected to be completed by June. 

Source: http://www.columbiabasinherald.com/news/wanapum-dam-pool-back-to- 
normal-level/article a3cabab2-d7fc-l le4-8503-f7beb2c95eb2.html 



35. March 31, New Philadelphia Times Reporter - (Ohio) Dover Dam project concludes 
with a ‘great day of celebration’. A $60 million safety-assurance project to stabilize 
the aging Dover Dam in Ohio was completed March 31 after funding was approved in 
2003 for the project which included the installation of 57 anchors in the dam and 
construction of a parapet wall, and the installation of 60 bar anchors, among other 
improvements. 

Source: 

http://www.timesreporter.com/article/20150331/NEWS/150339827/1994/NEWS/ 

36. March 31, Salida Mountain Mail - (Colorado) Denver to close Antero Reservoir 
June 1 for dam repairs. Antero Reservoir in Colorado will close beginning June 1 for 
an estimated $17 - $20 million repair project on the Antero Dam which will include 
bringing the dam up to current safety standards to help restore normal water levels. The 
reservoir is expected to be fully functioning at normal operating levels by 2018. 

Source: http://www.chaffeecountytimes.com/free content/denver-to-close-antero- 
reservoir-june-for-dam-repairs/article d9e9edae-d4b7-lle4-8977-77532a446ddd.html 
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NTAS 



NO ACTIVE ALERTS 
www.DHS.gov/alerts 
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